update search command to use FTS5 SQLite table for complex searches

This commit is contained in:
Charlotte Croce 2025-04-18 14:51:43 -04:00
parent d839089153
commit 167829704a
8 changed files with 1359 additions and 267 deletions

View file

@ -30,21 +30,14 @@ const commandPatterns = [
module: 'sigma',
params: [2] // rule ID is in capturing group 2
},
// Sigma search patterns
{
name: 'sigma-search',
regex: /^(search|find|look\s+for)\s+(rules|detections)?\s*(in|from)?\s*sigma\s+(for|where|with)?\s+(.+)$/i,
action: 'search',
regex: /^(search|find)\s+(sigma\s+)?(rules|detections)?\s*(where|with)\s+(.+)$/i,
action: 'complexSearch',
module: 'sigma',
params: [5] // search query is in capturing group 5
},
{
name: 'sigma-search-simple',
regex: /^(search|find)\s+(.+)$/i,
action: 'search',
module: 'sigma',
params: [2] // search query is in capturing group 2
params: [5] // complex query conditions in capturing group 5
},
// Sigma create patterns
@ -55,7 +48,7 @@ const commandPatterns = [
module: 'sigma',
params: [2] // rule ID is in capturing group 2
},
// Sigma stats patterns
{
name: 'sigma-stats-first',